diff --git a/doc/Changelog b/doc/Changelog
index 1a9ad9c01..2f454eb41 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+23 October 2008: Wouter
+	- a little more debug info for failure on signer names. prints names.
+
 22 October 2008: Wouter
 	- CFLAGS are picked up by configure from the environment.
 	- iana portlist updated.
diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c
index d4d2e52b5..e033fdc0d 100644
--- a/validator/val_sigcrypt.c
+++ b/validator/val_sigcrypt.c
@@ -1492,6 +1492,10 @@ dnskey_verify_rrset_sig(struct regional* region, ldns_buffer* buf,
 	/* verify key dname == sig signer name */
 	if(query_dname_compare(signer, dnskey->rk.dname) != 0) {
 		verbose(VERB_QUERY, "verify: wrong key for rrsig");
+		log_nametypeclass(VERB_QUERY, "RRSIG signername is", 
+			signer, 0, 0);
+		log_nametypeclass(VERB_QUERY, "the key name is", 
+			dnskey->rk.dname, 0, 0);
 		return sec_status_bogus;
 	}